All individuals and organizations that process your personal data must comply with the rules set by the PDPA, except for the Federal and State Government.